I wonder if this is a bug or a feature:

In that script (/usr/local/aspseek/sbin/aspseek-mysql-postinstall)
you do:

...
ASPSEEK=aspseek
ASPSEEK_DIR=${ASPSEEK}
...
mysql $MYSQL_ROOT_ARGS ${ASPSEEK_SQLDB} < /etc/${ASPSEEK_DIR}/sql/mysql/tables.sql
...

Which is wrong, as long as you don't install aspseek into /etc. Also
the setting of the ASPSEEK_DIR is wrong (or ASPSEEK is), I guess this is
a problem with putting the right configure-values into the script?

Additionally I would restrict the access to localhost e.g.

GRANT ALL PRIVILEGES ON ${ASPSEEK_SQLDB}.localhost TO
${ASPSEEK_SQLUSER}@localhost IDENTIFIED BY '$DB_PASSWD';

And perhaps

REVOKE GRANT OPTION ON ${ASPSEEK_SQLDB}.localhost TO
${ASPSEEK_SQLUSER}@localhost IDENTIFIED BY '$DB_PASSWD';

to disallow granting (dunno if grant is included in ALL PRIVILEGES in
the actual mysql-version)

     Balu


Reply via email to